Cyber Uncut

Malicious browser extensions, AI-powered phishing, and the evolution of Australia's Essential Eight are all putting renewed focus on proactive cyber defence. Hear ThreatLocker's lead cyber security engineer, Kieran Human, explain why organisations need to get the basics right before attackers get the chance to exploit them.

Malicious browser extensions are giving attackers another route into corporate environments, with phishing campaigns tricking users into installing tools capable of running arbitrary code. Cyber Daily's David Hollingworth and Human break down how the so-called Edgecution attack method works, how initial access brokers fit into the ransomware ecosystem, and why even highly technical employees can fall for increasingly convincing social engineering.
The conversation then turns to what defenders can actually do about it. Human argues that security teams need to move beyond relying solely on detection and response, with application allow-listing and other proactive controls providing a critical layer of protection when users inevitably make mistakes.
Finally, Hollingworth and Human examine the future of Australia's Essential Eight, including the move towards the new Essentials framework and potential guidance for enterprise, cloud, and AI environments.
Enjoy,
The Cyber Uncut team

In this episode of Cyber Uncut, Cyber Daily's Liam Garman is joined by Alex Nehmy, who explains why securing critical infrastructure requires a different approach to traditional IT security.

Discover why operational technology has become one of the highest-value targets for sophisticated threat actors, how attacks on OT differ from conventional data breaches, and why visibility into industrial environments is the foundation of effective defence.
The discussion explores real-world examples of cyber attacks causing physical disruption, the growing risks posed by supply chains and connected devices, and why the idea of a truly "air-gapped" network is often more myth than reality.
The conversation also examines how AI is reshaping both offensive and defensive cyber operations, the challenges organisations face in protecting modern extended OT (xOT) environments, and the practical steps security leaders can take to improve resilience against nation-state threats. Whether you're responsible for IT, OT, or critical infrastructure, this episode offers valuable insights into one of cyber security's most important and rapidly evolving battlegrounds.
Listen now to hear how security leaders can strengthen their OT defences, reduce risk, and stay ahead of increasingly sophisticated cyber adversaries.
Enjoy,
The Cyber Uncut team

Dr Ross Babbage warns that without urgent economic reform and industrial recalibration, Australia risks becoming a client state of Beijing.
Returning to the Defence Connect Podcast, strategic analyst Dr Ross Babbage delivers an unsparing diagnosis: Australia is drifting towards a future of strategic weakness, economic vulnerability and de facto dependence on Beijing – unless the nation urgently reverses course on industrial policy, governance efficiency and the information asymmetry crippling public debate.
In a wide-ranging conversation with host Steve Kuper, Babbage articulates an emerging geopolitical fracture: the world is crystallising into distinct economic camps. The first, led by the United States and including Western democracies, is erecting selective tariffs and deepened trade ties. Camp two is China and its authoritarian satellites. A third comprises developing nations watching carefully before committing.
Australia's position, Babbage argues, remains fatefully ambiguous. While virtually every Western ally has taken protective measures against Chinese manufacturing dumping and industrial subsidy – a regime he quantifies at eight to 18 times the support other nations provide – Australia has remained conspicuously reticent. China's leverage remains decisive: our iron ore and coal exports are non-negotiable parts of Beijing's strategic calculus.
The deeper problem, he stresses, runs through economic governance itself. Australia has deindustrialised deliberately over three decades, shed critical capabilities in steel and advanced manufacturing, surrendered energy cost advantage and starved investment in domestic capability. Without deliberate recalibration – smaller government, redirection of trade partnerships, strategic investment incentives – Australia defaults towards clientelism.
Equally critical is the communication void. Defence industry leaders, board chairs of major firms and even policymakers routinely tell Babbage they were unaware of the scale of Chinese subversion, intellectual property theft and coordinated disintegration operations aimed at fracturing Western cohesion.
The path forward, he argues, demands frank public briefings, ruthless priority setting and abandonment of exhausted economic orthodoxies. Without it, Australia becomes the strategic backwater Beijing expects.
Enjoy the podcast, 
The Contested Ground team

In this week's podcast, Cyber Daily's Daniel Croft and David Hollingworth argue for sovereign Australian AI, catch up with the Origin Energy data breach, uncover a Court Services Victoria hack, and ponder the efficacy of taking a foreign chat platform to court over terror content.

Should Aussie banks have access to Australian Taxation Office data to stop fraud? That's how the podcast kicks off, alongside the revelation that fraudsters are using AI to fake documents to secure massive bank loans. For Hollingworth and Croft, the answer is a resounding yes, which is also the case when it comes to sovereign AI capability, as Australian company Maincode brings its own coding agent online.
This week, Origin Energy revealed the extent of its recent data breach, while Court Services Victoria disclosed it had fallen victim to prolific hacker 2019. It's been a torrid time for data security in Australia, with even an insider threat rearing its head in a data breach at NSW Health.
Finally, the pair discuss whether or not eSafety can effectively sue chat platform Telegram over pro-terror content, while the Australian Communications and Media Authority said it is suing Optus over its Triple Zero failures last year.
Just another week in cyber security.
Enjoy,
The Cyber Uncut team.

In this week's podcast, Cyber Daily's Daniel Croft and David Hollingworth cover what happens when AI goes wild, one of Australia's biggest energy providers discloses a data breach, and Premier Jacinta Allan goes after big tech.

The podcast kicks off with a massive data breach impacting AI music-generating platform Suno, and the implications of OpenAI admitting it was one of its AI agents responsible for "malicious activity" targeting Hugging Face. AI breaking its own guardrails is a thing that is happening now, and it is something everyone in the field should be paying attention to.
Then it's on to the week in data breaches, and Hollingworth gets into the details of the Origin Energy hack, while Croft outlines the impact of an attack on a Coca-Cola subsidiary. Each one involves real impact, from personal data to company operations. And that's just the tip of the iceberg this week!
Finally, the pair find some solace in the Office of the Australian Information Commissioner (OAIC) revealing it found nothing wrong with Qantas in the wake of its own data breach in 2025, proving that you can do everything right when it comes to securing data, but still come to grief. And then there's good news out of Victoria, with the state government outlining its plans to tackle online harms without banning kids from social media, and limiting the spread of workplace surveillance.
Just another week in cyber security.
Enjoy,
The Cyber Uncut team